- Directory service developed by Microsoft to manage Windows domain networks - Stores information related to objects, such as Computers, Users, Printers, etc. - Authenticates using Kerberos tickets - Non-Windows devices, such as Linux machines, firewalls can also authenticate to AD via [[Remote Authentication Dial-in User Service|RADIUS]] or [[Lightweight Directory Access Protocol|LDAP]]